Several maps created to help the agency make decisions — such as where to open new offices and allocate certain resources — were made public through incorrect privacy settings between 2021 and 2025, the Department of Human Services said in a statement.
More than 32,000 clients of the IDHS Division of Rehabilitation Services had information publicly viewable between April 2021 and September 2025. The information included names, addresses, case numbers, case status, referral source information, region and office information, and status as to the division of recipients of rehabilitation services, the agency said.
IDHS said the addresses, case numbers, demographic information and names of Medical Assistance plans of approximately 670,000 Medicaid and Medicare Savings Program recipients were publicly accessible between January 2022 and September 2025.
The state agency said the mapping website is unable to identify who viewed the maps, and IDHS is unaware of any misuse of personal information as a result of the data leak.
IDHS discovered the problem on Sept. 22 and immediately changed the privacy settings for all maps, restricting access to authorized IDHS employees, the agency said. It also implemented a Secure Maps policy that prohibits the uploading of customer data to public mapping websites.
Individuals whose information was made public will receive a notice from IDHS about the leak. The notice will include a phone number people can call for more information.
<a href